Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
File: oYZO36QS13oDy_WRMeP8wDpg4Yg.mft (raw, json)
Hash identifier: utzvsIgRo9o5/1EFgACJ2aNJaIp7GgU5rFDGbyLwsuQ=
Subject key identifier: 6C:01:34:65:98:C5:89:B4:6C:80:CD:CF:DF:47:AF:27:A1:AD:4F:FD
Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
Certificate issuer: /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Certificate serial: 0196BBC93BACDA632187E34F75B3A161CE8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 20:00:49 +0000
Manifest this update: Sat 10 May 2025 20:00:49 +0000
Manifest next update: Sun 11 May 2025 20:00:49 +0000
Files and hashes: 1: L3VPH_zsfjbjwAwWmPKEb-EZRqg.roa (hash: UjjV+/8s9XVTqZqV/PGNgru/2pjUXQnn5HjnZe2AuZE=)
2: oYZO36QS13oDy_WRMeP8wDpg4Yg.crl (hash: Gzrje17M0cUB1FopbhVsk7Aq6Cx2Na82EmHUbyBE9A8=)
3: w0-GJVM_7K6n8cz6c8qV0ZIKekk.roa (hash: 8mJ/uqu688jBVtDnfLQQnmIToxnxL1kuys3V2s+nqY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c9:3b:ac:da:63:21:87:e3:4f:75:b3:a1:61:ce:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Validity
Not Before: May 10 20:00:49 2025 GMT
Not After : May 11 20:00:49 2025 GMT
Subject: CN=6c01346598c589b46c80cdcfdf47af27a1ad4ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:1e:7a:5b:8c:56:b2:72:28:97:7c:07:bf:
c6:df:6d:b6:9a:b4:ef:ca:ab:09:34:d1:2e:56:42:
48:ab:86:f4:69:6a:49:1f:71:44:56:db:d3:f5:ec:
23:12:24:9d:0e:44:a3:ef:bd:c1:d0:e5:c7:9e:6b:
64:ee:c7:5d:2e:66:98:0c:de:06:94:91:0d:4a:b3:
0f:4f:92:f9:a5:10:67:f4:da:5d:4a:e1:cb:41:d6:
0c:0c:50:bf:1a:90:5f:61:46:9b:97:0f:da:4f:6f:
97:c7:ab:5c:67:35:b7:20:0f:37:09:13:d3:f3:1e:
c7:ba:20:24:f9:a1:51:83:84:d0:48:a3:e1:d0:9f:
b3:ef:9f:09:66:2d:77:88:cc:8f:65:03:79:66:30:
e1:21:f3:c8:b6:7a:f3:6f:4b:53:98:11:c1:d6:11:
4e:97:3e:95:dc:bf:49:7d:05:71:75:dd:51:f7:59:
bf:29:ce:24:30:a3:8b:5d:c6:4f:ef:b4:83:2c:6f:
95:e4:19:93:89:f5:36:f6:69:2a:56:3e:4a:2b:f6:
07:aa:e8:8d:cb:18:fa:10:b9:97:a5:14:3c:b5:06:
6a:c2:34:21:d5:97:4e:d6:7f:b5:6f:ac:ff:e5:f4:
8c:9e:7d:25:bd:31:4f:d1:6e:0b:a7:95:17:8e:2c:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:01:34:65:98:C5:89:B4:6C:80:CD:CF:DF:47:AF:27:A1:AD:4F:FD
X509v3 Authority Key Identifier:
keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ad:13:f8:59:87:36:8b:81:31:ca:a7:40:08:d2:76:31:9e:
11:7b:be:be:aa:87:f5:b4:c5:d8:09:ab:c9:00:41:30:07:db:
ad:c2:b3:62:93:93:d4:bd:5b:19:21:3e:6d:22:88:e1:bd:b0:
37:31:78:fd:56:e0:0d:21:01:8b:0e:27:f1:54:34:87:5e:56:
c2:8a:8e:a4:ba:81:98:d6:40:dd:04:fa:41:62:49:70:70:10:
03:66:59:1f:ae:41:fd:55:a8:97:58:91:86:38:d4:dd:fa:8a:
0d:d1:f7:d8:bd:f7:ef:96:9c:66:8d:7c:0e:62:92:0b:bb:4d:
84:c6:d3:98:e2:a1:9b:20:74:43:0e:60:ce:61:18:c5:de:3b:
00:96:ae:2e:1d:a6:bf:bc:ca:e0:75:4f:e3:0f:22:1d:2a:cc:
8e:fe:a6:b8:e8:27:e0:6b:70:65:38:e4:e7:db:7e:72:c5:9c:
2f:7a:ae:df:6f:9a:c9:94:40:b1:80:ee:45:dd:ba:fb:e7:52:
24:90:b2:27:11:f4:ce:d2:64:1b:ff:b6:0d:c3:4d:54:74:1d:
2f:15:e5:f2:0d:f6:4e:22:1d:a7:d5:c5:55:45:84:e7:50:2f:
b2:1e:1f:40:0c:3a:81:4a:8a:81:2b:b2:36:cc:c7:a2:e4:35:
82:c4:4c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:12:15 2025 by rpki-client